App analysis · 18.10.2026

O Mobile

es.syon.o_mobile · version 2.7.1007

3SDKs found
3companies
3companies outside the EEA
6sensitive permissions

In short

SDKs found: 3. Companies: 3, of which outside the EEA — 3. Sensitive permissions: 6 — all code inside the app, including embedded SDKs, can use them.

What is inside — embedded SDKs

  • Firebase Cloud Messaging — Google LLC, United States outside EEA push notifications
  • Stripe — Stripe, Inc., United States outside EEA payments
  • WeChat OpenSDK — Tencent, China outside EEA social login

Sensitive permissions (6)

  • camera — android.permission.CAMERA
  • files on the device — android.permission.READ_EXTERNAL_STORAGE
  • audio files — android.permission.READ_MEDIA_AUDIO
  • NFC: reading cards, documents and tags — android.permission.NFC
  • biometrics (fingerprint, face) — android.permission.USE_BIOMETRIC
  • fingerprint — android.permission.USE_FINGERPRINT
All manifest permissions (15)
  • android.permission.ACCESS_NETWORK_STATE
  • android.permission.CAMERA
  • android.permission.INTERNET
  • android.permission.NFC
  • android.permission.POST_NOTIFICATIONS
  • android.permission.READ_EXTERNAL_STORAGE
  • android.permission.READ_MEDIA_AUDIO
  • android.permission.USE_BIOMETRIC
  • android.permission.USE_FINGERPRINT
  • android.permission.VIBRATE
  • android.permission.WAKE_LOCK
  • com.android.vending.CHECK_LICENSE
  • com.google.android.c2dm.permission.RECEIVE
  • com.google.android.providers.gsf.permission.READ_GSERVICES
  • es.syon.o_mobile.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION

Limits of the analysis

The analysis shows code inside the app file, not data transfers: an SDK being present means a transfer is possible, not that it happens. The country is where the company owning the SDK is registered, not where its servers are. Some code may have been renamed at build time, so the SDK list is a lower bound.

The legal assessment is made by the competent supervisory authority.

Evidence

File: es.syon.o_mobile.xapk (38.0 MB)
Package: es.syon.o_mobile · version 2.7.1007 (code 134)
Android: minimum API 24, target API 36
File SHA-256: cf76deac00666554ac947e8fa0cf61b5865b6c55a4f4b575d10ccf30bdcfc601
Developer signature (SHA-256): 1b283162e3ddff988fcde8c38ce7145107a0a8ec97091b69678ad841e0f9e869
Signed by: Google Inc. (Mountain View, US) · outside EEA · key since 2022-02-16
Library: 75 SDK · 81 permissions · 13c27d15ac2e
File source: APKPure (через apkeep)

The same file (same SHA-256) with the same library version gives the same result — check it on the APK check page. Licence CC BY 4.0, source — gdpru.eu; report errors to contact@gdpru.eu.

Download card (Markdown)

← All analysed apps · Check your own app